Linux Distros Unpatched Vulnerability : CVE-2026-89591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - accel/rocket: initialize job domain before cleanup paths rocketioctlsubmitjob releases rjob through rocketjobput on allocation error paths. rocketjobcleanup...

Linux Distros Unpatched Vulnerability : CVE-2026-89734

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: uvc: Fix null pointer dereference in uvcgvideoinit In uvcgvideoinit, if kthreadrunworker fails, the error logged uses uvcgerr, however, the pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-80956

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-pcache: only hand out initialized cache segments getcachesegment scans the segment map up to cache-nsegs, the physical device segment count, but cachesegsini...

Linux Distros Unpatched Vulnerability : CVE-2026-89509

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - RDMA/ionic: Embed counter driver data in rdmacounter allocation Commit 7e53b31acc7f RDMA/core: Create and destroy rdmacounter using rdmazallocdrvobj requires...

Linux Distros Unpatched Vulnerability : CVE-2026-89460

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/cpumcf: Handle CPU hotplug via prepare/dead callbacks The command 'perf stat -e cycles -- ' crashes the kernel when CPUs are hotplug added during that run...

Linux Distros Unpatched Vulnerability : CVE-2026-89528

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - svcrdma: Reject Read lists that exceed the page budget Individual Read segment lengths are validated at decode time, but nothing prevents a requester from sendi...

Linux Distros Unpatched Vulnerability : CVE-2026-80992

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net: ravb: avoid dereferencing an invalid PTP clock The PTP clock is unavailable before the first open, so querying its index can dereference a NULL pointer...

Linux Distros Unpatched Vulnerability : CVE-2026-89552

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - params: fix charp corruption on allocation failure paramsetcharp stores charp parameters in allocated memory after slab is available, and releases the previous...

Linux Distros Unpatched Vulnerability : CVE-2026-80963

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - dm-stats: fix a crash if allocation of per-cpu data fails If dmkvzallocpercpuallocsize, cputonodecpu fails, the code jumps to the out label and calls dmstatfre...

Linux Distros Unpatched Vulnerability : CVE-2026-89717

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - zram: set default primary compressor in zramdestroycomps Patch series zram: fix zram issues reported by sashiko. Sashiko drove by and reported 1 a couple of zra...

Linux Distros Unpatched Vulnerability : CVE-2026-89561

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: rpl: fix NULL dereference of idev in ipv6rplsrhrcv ipv6rplsrhrcv dereferences idev from in6devget without a NULL check when reading idev-cnf.rplsegenabled...

Linux Distros Unpatched Vulnerability : CVE-2026-89511

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - qede: Fix NULL pointer dereference in TPA fragment processing Under memory pressure, the qede driver encounters NULL pointer dereferences when processing TPA...

Linux Distros Unpatched Vulnerability : CVE-2026-89770

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: iomap: don't free integrity payload that doesn't exist fsbiointegrityalloc might not allocat...

Linux Distros Unpatched Vulnerability : CVE-2026-80984

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - net/smc: do not dereference an unset send buffer on the SMC-D teardown path smcclosestreamwait calls smctxpreparedsends from inside its skwaitevent condition, a...

Linux Distros Unpatched Vulnerability : CVE-2026-89711

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - NFSD: remove flawed WARNONONCE from nfsdmodecheck The header for commit e75b23f9e323 nfsd: check dcanlookup in fhverify of directories details the assumption th...

Linux Distros Unpatched Vulnerability : CVE-2026-89457

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - s390/dasd: Guard sysfs discipline callbacks against unallocated private data Several sysfs show/store handlers call a discipline callback that dereferences...

Linux Distros Unpatched Vulnerability : CVE-2026-89679

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - nfsd: fix null dereference in nfsd4setattr for deleg timestamp attrs When a SETATTR request includes FATTR4WORD2TIMEDELEGACCESS or FATTR4WORD2TIMEDELEGMODIFY in...

CVE-2026-89711

A flaw was found in the Linux kernel's Network File System Daemon NFSD. An invalid assumption in the nfsdmodecheck function regarding directory lookup capabilities during NFS reexport could lead to a null pointer dereference. A remote attacker could exploit this by performing a LOOKUP operation o...

CVE-2026-89770

A flaw was found in the iomap component of the Linux kernel. This vulnerability occurs when Protection Information PI verification is disabled on a block device, causing fsbiointegrityalloc to not allocate a bio integrity payload. Subsequently, the iomapbioreadfoliorangesync function attempts to...

CVE-2026-89734

A flaw was found in the Linux kernel's USB Video Class UVC gadget driver. This vulnerability occurs in the uvcgvideoinit function when the kthreadrunworker function fails. In such a scenario, an error logging mechanism attempts to access an uninitialized pointer, leading to a null pointer...